Red Hat Security Advisory 2022-5491-01 ≈ Packet Storm

Home^[1] Files^[2] News^[3] &[SERVICES_TAB] Contact^[4] Add New^[5]

Change Mirror^[18] Download^[19]

        -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
====================================================================                   
Red Hat Security Advisory
Synopsis:          Important: rh-php73-php security and bug fix update
Advisory ID:       RHSA-2022:5491-01
Product:           Red Hat Software Collections
Advisory URL:      https://access.redhat.com/errata/RHSA-2022:5491
Issue date:        2022-07-04
CVE Names:         CVE-2021-21703 CVE-2021-21707 CVE-2022-31625
CVE-2022-31626
====================================================================
1. Summary:
An update for rh-php73-php is now available for Red Hat Software
Collections.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
2. Relevant releases/architectures:
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) - ppc64le, s390x, x86_64
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) - x86_64
3. Description:
PHP is an HTML-embedded scripting language commonly used with the Apache
HTTP Server.
Security Fix(es):
* php: password of excessive length triggers buffer overflow leading to RCE
(CVE-2022-31626)
* php: Local privilege escalation via PHP-FPM (CVE-2021-21703)
* php: special character breaks path in xml parsing (CVE-2021-21707)
* php: uninitialized array in pg_query_params() leading to RCE
(CVE-2022-31625)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
Bug Fix(es):
* rh-php73: rebase to 7.3.33 (BZ#2100753)
4. Solution:
For details on how to apply this update, which includes the changes
described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing the updated packages, the httpd daemon must be restarted
for the update to take effect.
5. Bugs fixed (https://bugzilla.redhat.com/):
2016535 - CVE-2021-21703 php: Local privilege escalation via PHP-FPM
2026045 - CVE-2021-21707 php: special character breaks path in xml parsing
2098521 - CVE-2022-31625 php: uninitialized array in pg_query_params() leading to RCE
2098523 - CVE-2022-31626 php: password of excessive length triggers buffer overflow leading to RCE
2100753 - rh-php73: rebase to 7.3.33 [rhscl-3.8.z]
6. Package List:
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7):
Source:
rh-php73-php-7.3.33-1.el7.src.rpm
ppc64le:
rh-php73-php-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-bcmath-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-cli-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-common-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-dba-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-dbg-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-debuginfo-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-devel-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-embedded-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-enchant-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-fpm-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-gd-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-gmp-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-intl-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-json-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-ldap-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-mbstring-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-mysqlnd-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-odbc-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-opcache-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-pdo-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-pgsql-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-process-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-pspell-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-recode-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-snmp-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-soap-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-xml-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-xmlrpc-7.3.33-1.el7.ppc64le.rpm
rh-php73-php-zip-7.3.33-1.el7.ppc64le.rpm
s390x:
rh-php73-php-7.3.33-1.el7.s390x.rpm
rh-php73-php-bcmath-7.3.33-1.el7.s390x.rpm
rh-php73-php-cli-7.3.33-1.el7.s390x.rpm
rh-php73-php-common-7.3.33-1.el7.s390x.rpm
rh-php73-php-dba-7.3.33-1.el7.s390x.rpm
rh-php73-php-dbg-7.3.33-1.el7.s390x.rpm
rh-php73-php-debuginfo-7.3.33-1.el7.s390x.rpm
rh-php73-php-devel-7.3.33-1.el7.s390x.rpm
rh-php73-php-embedded-7.3.33-1.el7.s390x.rpm
rh-php73-php-enchant-7.3.33-1.el7.s390x.rpm
rh-php73-php-fpm-7.3.33-1.el7.s390x.rpm
rh-php73-php-gd-7.3.33-1.el7.s390x.rpm
rh-php73-php-gmp-7.3.33-1.el7.s390x.rpm
rh-php73-php-intl-7.3.33-1.el7.s390x.rpm
rh-php73-php-json-7.3.33-1.el7.s390x.rpm
rh-php73-php-ldap-7.3.33-1.el7.s390x.rpm
rh-php73-php-mbstring-7.3.33-1.el7.s390x.rpm
rh-php73-php-mysqlnd-7.3.33-1.el7.s390x.rpm
rh-php73-php-odbc-7.3.33-1.el7.s390x.rpm
rh-php73-php-opcache-7.3.33-1.el7.s390x.rpm
rh-php73-php-pdo-7.3.33-1.el7.s390x.rpm
rh-php73-php-pgsql-7.3.33-1.el7.s390x.rpm
rh-php73-php-process-7.3.33-1.el7.s390x.rpm
rh-php73-php-pspell-7.3.33-1.el7.s390x.rpm
rh-php73-php-recode-7.3.33-1.el7.s390x.rpm
rh-php73-php-snmp-7.3.33-1.el7.s390x.rpm
rh-php73-php-soap-7.3.33-1.el7.s390x.rpm
rh-php73-php-xml-7.3.33-1.el7.s390x.rpm
rh-php73-php-xmlrpc-7.3.33-1.el7.s390x.rpm
rh-php73-php-zip-7.3.33-1.el7.s390x.rpm
x86_64:
rh-php73-php-7.3.33-1.el7.x86_64.rpm
rh-php73-php-bcmath-7.3.33-1.el7.x86_64.rpm
rh-php73-php-cli-7.3.33-1.el7.x86_64.rpm
rh-php73-php-common-7.3.33-1.el7.x86_64.rpm
rh-php73-php-dba-7.3.33-1.el7.x86_64.rpm
rh-php73-php-dbg-7.3.33-1.el7.x86_64.rpm
rh-php73-php-debuginfo-7.3.33-1.el7.x86_64.rpm
rh-php73-php-devel-7.3.33-1.el7.x86_64.rpm
rh-php73-php-embedded-7.3.33-1.el7.x86_64.rpm
rh-php73-php-enchant-7.3.33-1.el7.x86_64.rpm
rh-php73-php-fpm-7.3.33-1.el7.x86_64.rpm
rh-php73-php-gd-7.3.33-1.el7.x86_64.rpm
rh-php73-php-gmp-7.3.33-1.el7.x86_64.rpm
rh-php73-php-intl-7.3.33-1.el7.x86_64.rpm
rh-php73-php-json-7.3.33-1.el7.x86_64.rpm
rh-php73-php-ldap-7.3.33-1.el7.x86_64.rpm
rh-php73-php-mbstring-7.3.33-1.el7.x86_64.rpm
rh-php73-php-mysqlnd-7.3.33-1.el7.x86_64.rpm
rh-php73-php-odbc-7.3.33-1.el7.x86_64.rpm
rh-php73-php-opcache-7.3.33-1.el7.x86_64.rpm
rh-php73-php-pdo-7.3.33-1.el7.x86_64.rpm
rh-php73-php-pgsql-7.3.33-1.el7.x86_64.rpm
rh-php73-php-process-7.3.33-1.el7.x86_64.rpm
rh-php73-php-pspell-7.3.33-1.el7.x86_64.rpm
rh-php73-php-recode-7.3.33-1.el7.x86_64.rpm
rh-php73-php-snmp-7.3.33-1.el7.x86_64.rpm
rh-php73-php-soap-7.3.33-1.el7.x86_64.rpm
rh-php73-php-xml-7.3.33-1.el7.x86_64.rpm
rh-php73-php-xmlrpc-7.3.33-1.el7.x86_64.rpm
rh-php73-php-zip-7.3.33-1.el7.x86_64.rpm
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7):
Source:
rh-php73-php-7.3.33-1.el7.src.rpm
x86_64:
rh-php73-php-7.3.33-1.el7.x86_64.rpm
rh-php73-php-bcmath-7.3.33-1.el7.x86_64.rpm
rh-php73-php-cli-7.3.33-1.el7.x86_64.rpm
rh-php73-php-common-7.3.33-1.el7.x86_64.rpm
rh-php73-php-dba-7.3.33-1.el7.x86_64.rpm
rh-php73-php-dbg-7.3.33-1.el7.x86_64.rpm
rh-php73-php-debuginfo-7.3.33-1.el7.x86_64.rpm
rh-php73-php-devel-7.3.33-1.el7.x86_64.rpm
rh-php73-php-embedded-7.3.33-1.el7.x86_64.rpm
rh-php73-php-enchant-7.3.33-1.el7.x86_64.rpm
rh-php73-php-fpm-7.3.33-1.el7.x86_64.rpm
rh-php73-php-gd-7.3.33-1.el7.x86_64.rpm
rh-php73-php-gmp-7.3.33-1.el7.x86_64.rpm
rh-php73-php-intl-7.3.33-1.el7.x86_64.rpm
rh-php73-php-json-7.3.33-1.el7.x86_64.rpm
rh-php73-php-ldap-7.3.33-1.el7.x86_64.rpm
rh-php73-php-mbstring-7.3.33-1.el7.x86_64.rpm
rh-php73-php-mysqlnd-7.3.33-1.el7.x86_64.rpm
rh-php73-php-odbc-7.3.33-1.el7.x86_64.rpm
rh-php73-php-opcache-7.3.33-1.el7.x86_64.rpm
rh-php73-php-pdo-7.3.33-1.el7.x86_64.rpm
rh-php73-php-pgsql-7.3.33-1.el7.x86_64.rpm
rh-php73-php-process-7.3.33-1.el7.x86_64.rpm
rh-php73-php-pspell-7.3.33-1.el7.x86_64.rpm
rh-php73-php-recode-7.3.33-1.el7.x86_64.rpm
rh-php73-php-snmp-7.3.33-1.el7.x86_64.rpm
rh-php73-php-soap-7.3.33-1.el7.x86_64.rpm
rh-php73-php-xml-7.3.33-1.el7.x86_64.rpm
rh-php73-php-xmlrpc-7.3.33-1.el7.x86_64.rpm
rh-php73-php-zip-7.3.33-1.el7.x86_64.rpm
These packages are GPG signed by Red Hat for security.  Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
7. References:
https://access.redhat.com/security/cve/CVE-2021-21703
https://access.redhat.com/security/cve/CVE-2021-21707
https://access.redhat.com/security/cve/CVE-2022-31625
https://access.redhat.com/security/cve/CVE-2022-31626
https://access.redhat.com/security/updates/classification/#important
8. Contact:
The Red Hat security contact is <Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser.>. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2022 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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KI2M
-----END PGP SIGNATURE-----
--
RHSA-announce mailing list
Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser.
https://listman.redhat.com/mailman/listinfo/rhsa-announce

• Follow us on Twitter^[22]
• Subscribe to an RSS Feed^[23]

File Tags

• ActiveX^[24] (932)
• Advisory^[25] (77,732)
• Arbitrary^[26] (15,140)
• BBS^[27] (2,859)
• Bypass^[28] (1,572)
• CGI^[29] (1,012)
• Code Execution^[30] (6,686)
• Conference^[31] (670)
• Cracker^[32] (797)
• CSRF^[33] (3,272)
• DoS^[34] (21,868)
• Encryption^[35] (2,331)
• Exploit^[36] (49,884)
• File Inclusion^[37] (4,148)
• File Upload^[38] (943)
• Firewall^[39] (821)
• Info Disclosure^[40] (2,549)
• Intrusion Detection^[41] (853)
• Java^[42] (2,793)
• JavaScript^[43] (798)
• Kernel^[44] (6,058)
• Local^[45] (14,018)
• Magazine^[46] (586)
• Overflow^[47] (12,217)
• Perl^[48] (1,411)
• PHP^[49] (5,046)
• Proof of Concept^[50] (2,283)
• Protocol^[51] (3,316)
• Python^[52] (1,400)
• Remote^[53] (29,716)
• Root^[54] (3,451)
• Ruby^[55] (577)
• Scanner^[56] (1,630)
• Security Tool^[57] (7,696)
• Shell^[58] (3,062)
• Shellcode^[59] (1,202)
• Sniffer^[60] (881)
• Spoof^[61] (2,084)
• SQL Injection^[62] (16,017)
• TCP^[63] (2,361)
• Trojan^[64] (676)
• UDP^[65] (866)
• Virus^[66] (659)
• Vulnerability^[67] (30,486)
• Web^[68] (9,043)
• Whitepaper^[69] (3,718)
• x86^[70] (942)
• XSS^[71] (17,340)
• Other^[72]

File Archives

• July 2022^[73]
• June 2022^[74]
• May 2022^[75]
• April 2022^[76]
• March 2022^[77]
• February 2022^[78]
• January 2022^[79]
• December 2021^[80]
• November 2021^[81]
• October 2021^[82]
• September 2021^[83]
• August 2021^[84]
• Older^[85]

Systems

• AIX^[86] (426)
• Apple^[87] (1,883)
• BSD^[88] (368)
• CentOS^[89] (55)
• Cisco^[90] (1,913)
• Debian^[91] (5,948)
• Fedora^[92] (1,690)
• FreeBSD^[93] (1,241)
• Gentoo^[94] (4,152)
• HPUX^[95] (878)
• iOS^[96] (318)
• iPhone^[97] (108)
• IRIX^[98] (220)
• Juniper^[99] (67)
• Linux^[100] (42,400)
• Mac OS X^[101] (683)
• Mandriva^[102] (3,105)
• NetBSD^[103] (255)
• OpenBSD^[104] (478)
• RedHat^[105] (11,713)
• Slackware^[106] (941)
• Solaris^[107] (1,607)
• SUSE^[108] (1,444)
• Ubuntu^[109] (7,864)
• UNIX^[110] (9,081)
• UnixWare^[111] (185)
• Windows^[112] (6,424)
• Other^[113]

© 2022 Packet Storm. All rights reserved.

Read more https://packetstormsecurity.com/files/167696/RHSA-2022-5491-01.txt